Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File:                     4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier:          +ejJGbeaasCkqe3dxc4m9X29pMBQVT34a5bXcVx44Rw=
Subject key identifier:   CB:EE:54:7B:88:64:91:6A:79:9B:9D:3A:00:80:89:7C:4C:4A:18:1E
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer:       /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial:       01969FACC7D621AAA0D3A33F02D2183E40F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number:          0E4D
Signing time:             Mon 05 May 2025 09:00:22 +0000
Manifest this update:     Mon 05 May 2025 09:00:22 +0000
Manifest next update:     Tue 06 May 2025 09:00:22 +0000
Files and hashes:         1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: tgO1/DTxqGPIAj4QYiQjVxgkkXCTTMxLWL45AY1hu4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:ac:c7:d6:21:aa:a0:d3:a3:3f:02:d2:18:3e:40:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
        Validity
            Not Before: May  5 09:00:22 2025 GMT
            Not After : May  6 09:00:22 2025 GMT
        Subject: CN=cbee547b8864916a799b9d3a0080897c4c4a181e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:20:b6:bc:0b:7f:9a:93:78:e5:f5:30:35:c9:
                    78:8f:ec:18:71:16:96:cb:43:bb:cf:c2:2d:53:32:
                    7a:0a:66:17:8d:be:b4:1d:ca:00:ef:e8:4b:7d:a2:
                    d5:5b:e2:41:3e:37:8d:bd:16:21:18:eb:6b:0d:24:
                    05:2e:07:60:60:a9:7a:31:64:c7:74:90:ae:bf:d4:
                    1a:2e:bb:d5:06:b8:7d:e6:ec:48:56:b5:ca:dc:71:
                    0d:fc:91:b4:34:21:5f:f8:f8:27:f2:90:88:ae:9a:
                    57:9e:75:8e:ee:b7:81:61:6a:e2:50:6c:1e:f3:ce:
                    a7:a2:b7:0c:b7:05:58:9f:6c:af:85:50:ee:28:64:
                    e5:c7:08:d9:4e:f7:2f:dc:51:67:17:02:53:05:14:
                    13:eb:32:3a:02:33:17:c7:ef:20:c9:eb:2a:ce:2c:
                    9e:5e:2a:31:50:24:d0:70:c9:24:5a:c6:a1:8d:a6:
                    f6:55:c6:f9:0b:1b:ec:6d:4a:36:35:b2:64:24:13:
                    23:7c:69:c3:f6:68:9c:3b:50:68:cd:1b:65:30:da:
                    8d:b0:c5:1f:7a:49:fa:9c:8a:c2:e8:ed:3a:de:91:
                    e0:1c:a3:54:9b:1d:52:27:c5:a3:7a:08:85:a5:45:
                    1a:7b:a5:0f:ba:e2:57:5a:65:c0:35:ff:42:e5:ad:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:54:7B:88:64:91:6A:79:9B:9D:3A:00:80:89:7C:4C:4A:18:1E
            X509v3 Authority Key Identifier:
                keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:97:69:63:54:a9:44:88:a9:7b:81:be:06:01:15:41:f1:d4:
         aa:ac:8e:06:d9:8b:6e:93:dc:27:71:4b:c0:af:26:83:24:6a:
         47:01:52:4a:c8:d4:c6:90:30:6a:d9:b7:a1:12:42:a7:06:5d:
         2e:86:11:e1:df:ad:2c:1a:eb:d8:1f:51:f9:54:79:7f:e5:b7:
         aa:6d:a2:36:98:5f:08:b7:d3:76:36:3b:56:97:ea:29:1c:10:
         fd:27:b4:25:b3:f4:de:b9:70:87:c5:09:ca:8b:a6:0c:58:31:
         42:25:9c:2f:e3:58:b4:91:c5:28:fa:0a:91:f9:93:37:73:a4:
         2e:4a:f7:0e:ec:25:33:d0:3f:c9:16:30:eb:b2:21:40:79:d1:
         76:bb:03:2b:07:6a:73:f0:47:6a:b9:78:e3:2b:20:94:a1:c9:
         37:1e:b2:0d:1a:82:4d:99:05:db:ad:e4:86:2b:ca:b9:4b:e0:
         74:b1:c4:20:eb:18:97:cd:5a:73:a9:6c:42:5f:cf:35:61:75:
         28:4f:56:34:a2:1a:3a:af:d1:b0:25:cd:f0:35:f8:af:b7:4b:
         28:e9:f0:8a:45:d9:58:b5:e0:39:24:ca:d6:bc:d2:ce:4d:4b:
         fa:8d:f2:71:d5:cf:5a:4d:5b:e5:dd:8e:1c:0d:e7:18:81:1a:
         fe:64:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:13:43 2025 by rpki-client